3. Spike In Outbound Web Server Traffic
The Web server outbound page size is an interesting way to look for data exfiltration through SQL injection attacks, Shteiman told CRN. Using SQL injection, the attacker manipulates the application to deliver data from the database. This will result in huge HTML pages containing the content of the database, he said. SQL injection is one of the oldest and most frequently used Web attacks often carried out in broad campaigns using automated attack tools. A successful compromise can result in customer data exposure, such as account credentials, credit card data or Social Security Numbers.